Trojan

VBA/TrojanDownloader.Agent.USH removal tips

Malware Removal

The VBA/TrojanDownloader.Agent.USH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VBA/TrojanDownloader.Agent.USH virus can do?

  • The office file contains a macro
  • The office file contains a macro with suspicious strings

How to determine VBA/TrojanDownloader.Agent.USH?


File Info:

crc32: A7E57967
md5: 0ec3a0613d2fc39417eaccebaedfcdf0
name: upload_file
sha1: 0195cdd1579f6be5f143e36c942075ae811c0595
sha256: 857b5c1209e2bec7dda0c80b92123f4ceb15f8c560f23551804e4bd09b94e901
sha512: 2f77e01859e5a54f7002b3ea13a17167589e4aa2b48b71a17d9d86f515af81b95acbbbfadcbd94818eb9a9ece47d2b7205dff8253329d9165ad9914b6f2af3f3
ssdeep: 768:VqG2RtChL4eGZVub/TDh3bOdxXvUognjp36SktdR9L8:YGK4FryYb/TDh3qdxXvU1n936VjR9L8
type: Microsoft Excel 2007+

Version Info:

0: [No Data]

VBA/TrojanDownloader.Agent.USH also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.44139690
McAfeeX97M/Dropper.ac
AegisLabTrojan.MSExcel.Dridex.4!c
BitDefenderTrojan.GenericKD.44139690
ArcabitTrojan.Generic.D2A184AA
InvinceaTroj/DocDl-AAZF
CyrenPP97M/Agent.KW.gen!Eldorado
SymantecW97M.Downloader
TrendMicro-HouseCallTrojan.X97M.DRIDEX.BD
KasperskyHEUR:Trojan-Downloader.MSOffice.SLoad.gen
AlibabaTrojanDownloader:VBA/MalDoc.ali1000101
TencentWin32.Trojan.Heur2.Jwd
Ad-AwareTrojan.GenericKD.44139690
EmsisoftTrojan.GenericKD.44139690 (B)
F-SecureMalware.VBA/Dldr.Agent.haovl
TrendMicroTrojan.X97M.DRIDEX.BD
McAfee-GW-EditionX97M/Dropper.ac
FireEyeTrojan.GenericKD.44139690
SophosTroj/DocDl-AAZF
IkarusTrojan.VBA.Agent
AviraVBA/Dldr.Agent.cdido
MAXmalware (ai score=99)
MicrosoftTrojanDownloader:O97M/Dridex.ARJ!MTB
ViRobotXLS.Z.Agent.18432.JI
ZoneAlarmHEUR:Trojan-Downloader.MSOffice.SLoad.gen
GDataTrojan.GenericKD.44139690
CynetMalicious (score: 85)
AhnLab-V3Downloader/XLS.Generic
ALYacTrojan.Downloader.DOC.Gen
ZonerProbably Heur.W97Call
ESET-NOD32VBA/TrojanDownloader.Agent.USH
RisingDownloader.Agent!8.B23 (TOPIS:E0:20xEUtIm3WV)
FortinetVBA/Agent.3411!tr
Qihoo-360Generic/Trojan.4f3

How to remove VBA/TrojanDownloader.Agent.USH?

VBA/TrojanDownloader.Agent.USH removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment